Outline - PowerPoint PPT Presentation

About This Presentation
Title:

Outline

Description:

Hotmail or MSN users automatically have Microsoft Passport accounts set up ... a second level of authentication on sites requiring stronger sign-in credentials ... – PowerPoint PPT presentation

Number of Views:87
Avg rating:3.0/5.0
Slides: 39
Provided by: fei1
Category:
Tags: hotmail | in | outline | sign

less

Transcript and Presenter's Notes

Title: Outline


1
Outline
  • User authentication
  • Password authentication, salt
  • Challenge-response authentication protocols
  • Biometrics
  • Token-based authentication
  • Authentication in distributed systems (multi
    service providers/domains)
  • Single sign-on, Microsoft Passport
  • Trusted Intermediaries

2
Password authentication
  • Basic idea
  • User has a secret password
  • System checks password to authenticate user
  • Issues
  • How is password stored?
  • How does system check password?
  • How easy is it to guess a password?
  • Difficult to keep password file secret, so best
    if it is hard to guess password even if you have
    the password file

3
Basic password scheme
  • Password file

User
kiwifruit
exrygbzyf kgnosfix ggjoklbsz
hash function
4
Basic password scheme
  • Hash function h strings ? strings
  • Given h(password), hard to find password
  • No known algorithm better than trial and error
  • User password stored as h(password)
  • When user enters password
  • System computes h(password)
  • Compares with entry in password file
  • No passwords stored on disk

5
Unix password system
  • Hash function is 25xDES
  • 25 rounds of DES-variant encryptions
  • Password file is publicly readable
  • Other information in password file
  • Any user can try dictionary attack
  • User looks at password file
  • Computes hash(word) for every word in dictionary
  • Salt makes dictionary attack harder

R.H. Morris and K. Thompson, Password security a
case history, Communications of the ACM,
November 1979
6
Salt
  • Password line
  • waltfURfuu4.4hY0U129129Belgers/home/walt/bin
    /csh

Compare
Salt
Input
Key
Constant, A 64-bit block of 0
Ciphertext
25x DES
Plaintext
When password is set, salt is chosen
randomly 12-bit salt slows dictionary attack by
factor of 212
7
Dictionary Attack some numbers
  • Typical password dictionary
  • 1,000,000 entries of common passwords
  • people's names, common pet names, and ordinary
    words.
  • Suppose you generate and analyze 10 guesses per
    second
  • This may be reasonable for a web site offline is
    much faster
  • Dictionary attack in at most 100,000 seconds 28
    hours, or 14 hours on average
  • If passwords were random
  • Assume six-character password
  • Upper- and lowercase letters, digits, 32
    punctuation characters
  • 689,869,781,056 password combinations.
  • Exhaustive search requires 1,093 years on average

8
Outline
  • User authentication
  • Password authentication, salt
  • Challenge-response authentication protocols
  • Biometrics
  • Token-based authentication
  • Authentication in distributed systems (multi
    service providers/domains)
  • Single sign-on, Microsoft Passport
  • Trusted Intermediaries

9
Challenge-response Authentication
  • Goal Bob wants Alice to prove her identity to
    him

Protocol ap1.0 Alice says I am Alice
I am Alice
Failure scenario??
10
Authentication
  • Goal Bob wants Alice to prove her identity to
    him

Protocol ap1.0 Alice says I am Alice
in a network, Bob can not see Alice, so Trudy
simply declares herself to be Alice
I am Alice
11
Authentication another try
Protocol ap2.0 Alice says I am Alice in an IP
packet containing her source IP address
Failure scenario??
12
Authentication another try
Protocol ap2.0 Alice says I am Alice in an IP
packet containing her source IP address
Trudy can create a packet spoofing Alices
address
13
Authentication another try
Protocol ap3.0 Alice says I am Alice and sends
her secret password to prove it.
Failure scenario??
14
Authentication another try
Protocol ap3.0 Alice says I am Alice and sends
her secret password to prove it.
Alices password
Alices IP addr
Im Alice
playback attack Trudy records Alices packet and
later plays it back to Bob
15
Authentication yet another try
Protocol ap3.1 Alice says I am Alice and sends
her encrypted secret password to prove it.
Failure scenario??
16
Authentication another try
Protocol ap3.1 Alice says I am Alice and sends
her encrypted secret password to prove it.
encryppted password
Alices IP addr
record and playback still works!
Im Alice
17
Authentication yet another try
Goal avoid playback attack
Nonce number (R) used only once in-a-lifetime
ap4.0 to prove Alice live, Bob sends Alice
nonce, R. Alice must return R, encrypted with
shared secret key
I am Alice
R
Alice is live, and only Alice knows key to
encrypt nonce, so it must be Alice!
Failures, drawbacks?
18
Authentication ap5.0
  • ap4.0 doesnt protect against server database
    reading
  • can we authenticate using public key techniques?
  • ap5.0 use nonce, public key cryptography

I am Alice
Bob computes
R
and knows only Alice could have the private key,
that encrypted R such that
19
Outline
  • User authentication
  • Password authentication, salt
  • Challenge-response authentication protocols
  • Biometrics
  • Token-based authentication
  • Authentication in distributed systems (multi
    service providers/domains)
  • Single sign-on, Microsoft Passport
  • Trusted Intermediaries

20
Biometrics
  • Use a persons physical characteristics
  • fingerprint, voice, face, keyboard timing,
  • Advantages
  • Cannot be disclosed, lost, forgotten
  • Disadvantages
  • Cost, installation, maintenance
  • Reliability of comparison algorithms
  • False positive Allow access to unauthorized
    person
  • False negative Disallow access to authorized
    person
  • Privacy?
  • If forged, how do you revoke?

21
Biometrics
  • Common uses
  • Specialized situations, physical security
  • Combine
  • Multiple biometrics
  • Biometric and PIN
  • Biometric and token

22
Token-based AuthenticationSmart Card
  • With embedded CPU and memory
  • Carries conversation w/ a small card reader
  • Various forms
  • PIN protected memory card
  • Enter PIN to get the password
  • Cryptographic challenge/response cards
  • A cryptographic key in memory
  • Computer create a random challenge
  • Enter PIN to encrypt/decrypt the challenge w/ the
    card
  • Cryptographic Calculator (readerless smart card)
  • Simulating a smartcard user enter the encrypted
    result

23
Smart Card Example
Initial data
Challenge
Time
Time
function
  • Some complications
  • Initial data shared with server
  • Need to set this up securely
  • Shared database for many sites
  • Clock skew

24
Outline
  • User authentication
  • Password authentication, salt
  • Challenge-Response
  • Biometrics
  • Token-based authentication
  • Authentication in distributed systems
  • Single sign-on, Microsoft Passport
  • Trusted Intermediaries

25
Single sign-on systems
e.g. Securant, Netegrity, Oblix
LAN
Rules
Database
user name, password, other auth
Authentication
Application
Server
  • Advantages
  • User signs on once
  • No need for authentication at multiple sites,
    applications
  • Can set central authorization policy for the
    enterprise

26
Microsoft Passport
  • Launched 1999
  • Claim gt 200 million accounts in 2002
  • Over 3.5 billion authentications each month
  • Log in to many websites using one account
  • Used by MS services Hotmail, MSN Messenger or MSN
    subscriptions also Radio Shack, etc.
  • Hotmail or MSN users automatically have Microsoft
    Passport accounts set up
  • Passport may continue to evolve bugs have been
    uncovered

27
Four parts of Passport account
  • Passport Unique Identifier (PUID)
  • Assigned to the user when he or she sets up the
    account
  • User profile, required to set up account
  • Phone number or Hotmail or MSN.com e-mail address
  • Also name, ZIP code, state, or country,
  • Credential information
  • E-mail address or phone number
  • Minimum six-character password or PIN
  • Four-digit security key, used for a second level
    of authentication on sites requiring stronger
    sign-in credentials
  • Wallet
  • Passport-based application at passport.com domain
  • E-commerce sites with Express Purchase function
    use wallet information rather than prompt the
    user to type in data

28
Passport log-in
29
Trusted Intermediaries
  • Symmetric key problem
  • How do two entities establish shared secret key
    over network?
  • Solution
  • trusted key distribution center (KDC) acting as
    intermediary between entities
  • Public key problem
  • When Alice obtains Bobs public key (from web
    site, e-mail, diskette), how does she know it is
    Bobs public key, not Trudys?
  • Solution
  • trusted certification authority (CA)

30
Key Distribution Center (KDC)
  • Alice, Bob need shared symmetric key.
  • KDC server shares different secret key with each
    registered user (many users)
  • Alice, Bob know own symmetric keys, KA-KDC KB-KDC
    , for communicating with KDC.

KDC
31
Key Distribution Center (KDC)
Q How does KDC allow Bob, Alice to determine
shared symmetric secret key to communicate with
each other?
KDC generates R1
KA-KDC(A,B)
KA-KDC(R1, KB-KDC(A,R1) )
Alice knows R1
Bob knows to use R1 to communicate with Alice
KB-KDC(A,R1)
Alice and Bob communicate using R1 as session
key for shared symmetric encryption
32
Ticket
  • In KA-KDC(R1, KB-KDC(A,R1) ), the KB-KDC(A,R1) is
    also known as a ticket
  • Comes with expiration time

33
Certification Authorities
  • Certification authority (CA) binds public key to
    particular entity, E.
  • E (person, router) registers its public key with
    CA.
  • E provides proof of identity to CA.
  • CA creates certificate binding E to its public
    key.
  • Certificate containing Es public key digitally
    signed by CA CA says this is Es public key

Bobs public key
CA private key
certificate for Bobs public key, signed by CA
-
Bobs identifying information
34
Certification Authorities
  • When Alice wants Bobs public key
  • gets Bobs certificate (Bob or elsewhere).
  • apply CAs public key to Bobs certificate, get
    Bobs public key

Bobs public key
CA public key

35
Single KDC/CA
  • Problems
  • Single administration trusted by all principals
  • Single point of failure
  • Scalability
  • Solutions break into multiple domains
  • Each domain has a trusted administration

36
Multiple KDC/CA Domains
  • Secret keys
  • KDCs share pairwise key
  • topology of KDC tree with shortcuts
  • Public keys
  • cross-certification of CAs
  • example Alice with CAA, Boris with CAB
  • Alice gets CABs certificate (public key p1),
    signed by CAA
  • Alice gets Boris certificate (its public key
    p2), signed by CAB (p1)

37
Backup Slides
38
Advantages of salt
  • Without salt
  • Same hash functions on all machines
  • Compute hash of all common strings once
  • Compare hash file with all known password files
  • With salt
  • One password hashed 212 different ways
  • Precompute hash file?
  • Need much larger file to cover all common strings
  • Dictionary attack on known password file
  • For each salt found in file, try all common
    strings
Write a Comment
User Comments (0)
About PowerShow.com